Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/Eq_dH_10_T41R_c-cQ39SFO8h4Y.roa
File: Eq_dH_10_T41R_c-cQ39SFO8h4Y.roa (raw, json)
Hash identifier: RvJnztm5usWBvo8l5QqeI/ooUwbKKE3Lzt202DS3KQU=
Subject key identifier: 12:AF:DD:1F:FD:74:FD:3E:35:47:F7:3E:71:0D:FD:48:53:BC:87:86
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 01856CEF38D1A25FA2C54A6480CC065A7EBE
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/Eq_dH_10_T41R_c-cQ39SFO8h4Y.roa
Signing time: Sun 01 Jan 2023 10:44:54 +0000
ROA not before: Sun 01 Jan 2023 10:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 148996
IP address blocks: 2a0f:7880:100::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:38:d1:a2:5f:a2:c5:4a:64:80:cc:06:5a:7e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 1 10:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12afdd1ffd74fd3e3547f73e710dfd4853bc8786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:d8:8f:13:9b:b4:bb:43:17:1d:b4:e2:47:
87:e3:28:1d:40:c4:74:69:d7:02:07:6b:ac:56:9e:
96:59:f8:a3:19:14:e9:c1:64:f7:aa:1d:6c:13:91:
f6:d6:73:7a:3d:86:3a:65:e5:fc:bd:f6:79:50:f8:
8f:8d:7b:45:00:d4:c2:d8:5b:e8:42:2a:9e:ac:7f:
c7:76:a4:1c:dc:a0:52:a1:3d:10:59:59:90:10:0f:
a3:5d:57:39:98:b2:60:2c:6f:16:d6:3d:ed:5f:25:
11:30:70:49:0d:4b:10:07:fd:a4:89:c8:31:e9:87:
c5:58:57:c4:97:de:dc:af:1b:e1:72:d5:3f:6a:46:
4b:95:50:81:ac:c8:97:d4:d5:4e:be:26:50:c2:90:
cf:ae:d2:4e:9f:66:88:5d:4a:d0:78:c5:cc:a0:86:
00:d6:65:36:cb:2e:46:4a:84:be:0e:fc:d9:0a:bc:
45:e6:f6:2a:62:6c:d6:bf:cd:fc:83:85:8e:58:41:
9f:c0:ad:6f:ee:0f:e7:a2:71:9f:8e:a8:19:c3:e5:
ec:1c:0a:c9:21:3e:b3:00:97:53:6e:03:10:bc:03:
e2:07:89:4a:04:23:66:0b:a9:fe:eb:4d:ea:bb:ad:
e6:55:24:e8:e1:6c:b7:1a:5b:18:f6:c5:79:c3:43:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AF:DD:1F:FD:74:FD:3E:35:47:F7:3E:71:0D:FD:48:53:BC:87:86
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/Eq_dH_10_T41R_c-cQ39SFO8h4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7880:100::/40
Signature Algorithm: sha256WithRSAEncryption
a9:86:2f:c6:98:32:78:57:d4:6c:f7:4a:9a:57:93:6d:8d:3e:
e1:0e:bd:e9:e1:48:38:07:cb:61:90:df:5d:b3:b4:9f:12:29:
c3:eb:61:fa:7c:2b:c6:ab:1b:f4:73:97:18:b0:f8:de:5b:4f:
a8:7a:a3:94:e6:a5:4f:67:ca:57:99:d3:d0:97:a8:06:df:83:
90:80:46:bf:42:ec:94:3f:45:64:f7:4e:70:cb:f9:87:d3:48:
ed:48:5b:bb:9b:8b:d8:8b:83:c1:ff:ba:47:fc:c1:00:c1:54:
6b:ad:f1:d8:e7:9f:08:ee:1d:7d:51:fe:51:03:54:da:09:71:
5c:45:53:8a:6a:79:59:0a:44:3c:3a:c9:7b:86:b5:c1:0d:13:
55:65:e7:2d:ad:e5:70:12:8b:88:6c:b6:e6:64:ca:56:71:fb:
e0:77:93:42:30:44:8b:f0:5f:4b:dd:be:87:ae:1b:9a:30:3c:
15:82:61:97:28:48:22:44:cc:2e:25:ad:e6:5a:ec:2b:6d:b7:
36:12:22:69:4f:c8:f4:b4:34:43:37:36:4d:e1:63:6a:07:2b:
92:ff:ed:0c:fa:b2:3d:5e:3d:d9:a7:2d:f8:ba:77:90:ad:45:
f1:7d:1c:26:23:e5:5b:1d:85:cb:d3:a2:24:d9:f4:4f:89:0f:
64:3e:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:51 2024 by rpki-client on console.sobornost.net